Skip to content

Recognize complete dependency license texts - #15146

Open
tamird wants to merge 1 commit into
google:masterfrom
tamird:license-text-classifier-final
Open

tamird wants to merge 1 commit into
google:masterfrom
tamird:license-text-classifier-final

Conversation

@tamird

@tamird tamird commented Sep 30, 2026 •

Copy link
Copy Markdown
Contributor

Replace phrase-based classification with complete license-text matching
to avoid combining independent notices. The old matcher combined Arrow's
BSD terms and OpenSSL's advertising clause into BSD-4-Clause 1.

Delegate text matching and identifier ownership to google/licensecheck
2, configured with the complete LLVM exception 3. References alone
do not establish a license grant. Keep the scanner's identifiers literal
so policy review sees the distinctions the detector can establish.

Regenerate the catalog for the new classifier dependency and the legacy
University of Illinois/NCSA grants in LLVM 3 and Kythe 4, previously
reported as MIT. Scope the corresponding policy exceptions to these two
dependencies and record their redistribution conditions, retaining the
existing source versions and archive hashes.

Assisted-by: Codex

@tamird
tamird force-pushed the license-text-classifier-final branch from b77c42e to c5e943b Compare October 3, 2026 00:04
@tamird

tamird commented Oct 3, 2026

Copy link
Copy Markdown
Contributor Author

Rebased onto current master, @EtiennePerot.

Posted by Codex on behalf of @tamird.

@EtiennePerot EtiennePerot left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hold on this for a week, it will fail internal checks until some exception goes through.

@tamird
tamird force-pushed the license-text-classifier-final branch 2 times, most recently from 44d3ce3 to a2cedf2 Compare October 13, 2026 14:34
@tamird
tamird force-pushed the license-text-classifier-final branch from a2cedf2 to b4e336c Compare October 18, 2026 00:09
@tamird

tamird commented Oct 18, 2026

Copy link
Copy Markdown
Contributor Author

@EtiennePerot, have the internal exceptions for this PR and #15145 propagated, or should both holds remain?

Posted by Codex on behalf of @tamird.

tamird added a commit to tamird/gvisor that referenced this pull request Oct 18, 2026
Pair the regular source/provider sweep with the authorized follow-up on
google#15146, covering both outstanding internal exceptions. Refresh google#15145
to its current head while preserving both maintainer holds.

Assisted-by: Codex
@tamird
tamird force-pushed the license-text-classifier-final branch 4 times, most recently from f7f7cd7 to 04108da Compare October 22, 2026 00:20
Replace phrase-based classification with complete license-text matching
to avoid combining independent notices. The old matcher combined Arrow's
BSD terms and OpenSSL's advertising clause into BSD-4-Clause [1].

Delegate text matching and identifier ownership to google/licensecheck
[2], configured with the complete LLVM exception [3]. References alone
do not establish a license grant. Keep the scanner's identifiers literal
so policy review sees the distinctions the detector can establish.

Regenerate the catalog for the new classifier dependency and the legacy
University of Illinois/NCSA grants in LLVM [3] and Kythe [4], previously
reported as MIT. Scope the corresponding policy exceptions to these two
dependencies and record their redistribution conditions, retaining the
existing source versions and archive hashes.

[1]: https://github.com/apache/arrow/blob/e03105efc/go/LICENSE.txt
[2]: https://github.com/google/licensecheck/blob/16aaea366/scan.go
[3]: https://github.com/llvm/llvm-project/blob/cb2f0d0a5/LICENSE.TXT
[4]: https://github.com/kythe/kythe/blob/a182743b6/LICENSE#L205-L251
@tamird
tamird force-pushed the license-text-classifier-final branch from 04108da to bec0658 Compare October 22, 2026 13:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants